A fake job offer took down Axie Infinity

Re:A fake job offer took down Axie Infinity by emmelaich on Wednesday July 06, 2022 @07:43PM (#32008286)

Yep, internal security is brittle. The initial pdf vector would be only the start of a long sequence of hacks, including social engineering. e.g. sending email from managers -- or slack messages as you mention.

[ Parent | on HN ]

Re:A fake job offer took down Axie Infinity by DelightOne on Thursday July 07, 2022 @07:06AM (#32012481)

How do you defend against getting email from internal people, especially from people you expect email from?

[ Parent | on HN ]

Re:A fake job offer took down Axie Infinity by mavhc on Thursday July 07, 2022 @07:37AM (#32012684)

Don't keep your security keys capable of root access on anything that's not a hardware token locked in a safe.

Of course if you can access the software running the blockchain and get everyone to install an update, that works too

[ Parent | on HN ]

Re:A fake job offer took down Axie Infinity by JacobThreeThree on Wednesday July 13, 2022 @01:52PM (#32086290)

You can call your colleague on the phone to confirm they sent the email asking you to open an attachment.

[ Parent | on HN ]